2024-03-28_fa60a215db52c6e8500e443686c3c75d_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-28_fa60a215db52c6e8500e443686c3c75d_mafia
Size

6.6MB
MD5

fa60a215db52c6e8500e443686c3c75d
SHA1

af762d9e9a99d251f7d77485137e6778ffe34fdd
SHA256

078b81e8ff57e1119dc5ae8b0f44c522e7b1b95fd7bc7f5672e2d6dd1c8491a7
SHA512

e15fb89bfc5db0ce951ad83d3d0d126eca41a29dad61e605bf2098cc1d93e517805d5768a433f8bff523d699fe7174b0ec15de7fba323abe33cd3f6e4327af42
SSDEEP

196608:55of2kiiTqvBpo/61YumImJsv6tWKFdu9CA:tmJsv6tWKFdu9C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-28_fa60a215db52c6e8500e443686c3c75d_mafia

Files

2024-03-28_fa60a215db52c6e8500e443686c3c75d_mafia
.exe windows:5 windows x86 arch:x86

8213bea48394124db58f5fb968bb1181

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
SystemTimeToVariantTime
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen

imm32

ImmNotifyIME
ImmGetContext
ImmAssociateContext
ImmSetCandidateWindow
ImmGetCompositionStringW
ImmReleaseContext
ImmSetCompositionWindow
ImmGetVirtualKey
ImmGetDefaultIMEWnd

winmm

PlaySoundW

gdi32

SwapBuffers
GetDIBits
BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
SelectObject
GdiFlush
GetDeviceCaps
CreateRectRgn
CombineRgn
OffsetRgn
GetStockObject
GetFontData
CreateFontIndirectW
EnumFontFamiliesExW
GetObjectW
RemoveFontMemResourceEx
RemoveFontResourceExW
AddFontResourceExW
GetTextMetricsW
AddFontMemResourceEx
SetPixelFormat
ChoosePixelFormat
CreateBitmap
DescribePixelFormat
GetPixelFormat
GetBitmapBits
CreateCompatibleBitmap
CreateDCW
GetOutlineTextMetricsW
GetGlyphOutlineW
GetTextExtentPoint32W
SetWorldTransform
SetGraphicsMode
GetCharABCWidthsFloatW
GetCharABCWidthsI
GetCharABCWidthsW
ExtTextOutW
SetTextAlign
SetBkMode
SetTextColor
GetTextFaceW

kernel32

GetLastError
GetLocalTime
GetSystemTime
GetCurrentProcessId
GetConsoleWindow
OutputDebugStringW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileInformationByHandle
SetErrorMode
FindClose
FindFirstFileW
CloseHandle
CreateFileW
CreateDirectoryW
RemoveDirectoryW
GetFileAttributesW
CopyFileW
MoveFileW
DeleteFileW
LoadLibraryW
GetCurrentProcess
DeviceIoControl
GetFullPathNameW
GetLongPathNameW
GetTempPathW
GetCurrentDirectoryW
GetLogicalDrives
GetFileAttributesExW
GetSystemDirectoryW
WaitForSingleObject
SetEvent
CreateEventW
FindNextFileW
FindFirstFileExW
FlushFileBuffers
GetFileType
SetFilePointerEx
ReadFile
WriteFile
MoveFileExW
SetEndOfFile
MapViewOfFile
GetSystemInfo
CreateFileMappingW
UnmapViewOfFile
FormatMessageW
GetCurrentThreadId
TlsFree
TlsSetValue
Sleep
SetThreadPriority
GetCurrentThread
LocalFree
TerminateThread
TlsGetValue
WaitForMultipleObjects
ResumeThread
GetThreadPriority
CreateThread
DuplicateHandle
QueryPerformanceFrequency
GetModuleHandleW
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetCurrencyFormatW
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetUserDefaultUILanguage
GetGeoInfoW
GetUserGeoID
GetTimeZoneInformation
ResetEvent
FreeLibrary
OpenProcess
LoadLibraryA
IsValidLocale
IsValidLanguageGroup
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetUserDefaultLangID
ExpandEnvironmentStringsW
CreateProcessW
CheckRemoteDebuggerPresent
InterlockedIncrement
InterlockedDecrement
SetFilePointer
CreateFileA
GetProcessHeap
EnumSystemLocalesA
GetLocaleInfoA
GetStringTypeW
GetFileAttributesA
IsValidCodePage
GetOEMCP
GetACP
WriteConsoleW
HeapSize
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetLastError
HeapCreate
IsProcessorFeaturePresent
GetCPInfo
LCMapStringW
ExitThread
SetFileAttributesW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleMode
GetConsoleCP
ExitProcess
HeapReAlloc
HeapAlloc
HeapSetInformation
GetCommandLineA
RtlUnwind
RaiseException
HeapFree
DecodePointer
EncodePointer
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
VirtualAlloc
VirtualFree
ReleaseMutex
CreateMutexW
GetVersionExW
VerSetConditionMask
VerifyVersionInfoW
GetProcAddress
GetUserDefaultLCID
CompareStringW
GetModuleHandleA
TlsAlloc
DeleteFileA

user32

GetMenu
GetKeyboardState
MapVirtualKeyW
IsZoomed
SetMenuItemInfoW
TrackPopupMenuEx
GetKeyState
SetWindowsHookExW
ToUnicode
GetClipboardFormatNameW
RegisterClipboardFormatW
IsIconic
SetWindowPlacement
MoveWindow
SetParent
GetUpdateRect
ToAscii
CharNextExA
BeginPaint
EndPaint
SetCapture
SetForegroundWindow
GetQueueStatus
PostMessageW
CallNextHookEx
DestroyWindow
UnhookWindowsHookEx
PeekMessageW
KillTimer
SetTimer
UnregisterClassW
DrawIconEx
TranslateMessage
DispatchMessageW
CreateWindowExW
SetWindowLongW
RegisterClassW
GetWindowLongW
GetSysColor
MsgWaitForMultipleObjectsEx
DefWindowProcW
EnumWindows
RealGetWindowClassW
GetWindowTextW
GetCursor
CreateCursor
CreateIconIndirect
SetCursorPos
GetCursorInfo
GetMessageExtraInfo
TrackMouseEvent
EnumDisplayMonitors
GetMonitorInfoW
NotifyWinEvent
LoadCursorW
GetIconInfo
GetAsyncKeyState
DestroyCursor
SetClipboardViewer
GetWindowThreadProcessId
ChangeClipboardChain
CreateCaret
HideCaret
DestroyCaret
RegisterWindowMessageW
SetCaretPos
LoadIconW
SetFocus
SetWindowRgn
SetWindowTextW
AdjustWindowRectEx
EnableMenuItem
GetWindowPlacement
GetWindowRect
ShowWindow
SetWindowPos
InvalidateRect
FlashWindowEx
SetCursor
GetSystemMenu
ReleaseCapture
GetForegroundWindow
IsChild
IsWindowVisible
GetAncestor
GetDesktopWindow
DestroyIcon
GetCapture
GetSysColorBrush
GetClassInfoW
LoadImageW
GetSystemMetrics
RegisterClassExW
ClientToScreen
GetCursorPos
GetFocus
ChildWindowFromPointEx
GetParent
GetKeyboardLayoutList
GetClientRect
ScreenToClient
GetDC
ReleaseDC
GetCaretBlinkTime
GetDoubleClickTime
SystemParametersInfoW
MessageBeep
SendMessageW

shell32

ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderPathW

ole32

DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
ReleaseStgMedium
RegisterDragDrop
CoGetMalloc
RevokeDragDrop
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateGuid
CoCreateInstance
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoLockObjectExternal

advapi32

FreeSid
CopySid
GetLengthSid
GetTokenInformation
OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegEnumValueW
RegFlushKey
RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW

ws2_32

WSAAsyncSelect

opengl32

glIsTexture
glBindTexture
glBlendFunc
glClear
glClearColor
glClearStencil
glColorMask
glCopyTexImage2D
glCopyTexSubImage2D
glCullFace
glDeleteTextures
glDepthFunc
glDepthMask
glDisable
glDrawArrays
glDrawElements
glEnable
glFinish
glFlush
glFrontFace
glGenTextures
glGetBooleanv
glGetError
glGetFloatv
glGetIntegerv
glGetString
glGetTexParameterfv
glGetTexParameteriv
glHint
glIsEnabled
glLineWidth
glPixelStorei
glPolygonOffset
glReadPixels
glScissor
glStencilFunc
glStencilMask
glStencilOp
glTexImage2D
glTexParameterf
glTexParameterfv
glTexParameteri
glTexParameteriv
glTexSubImage2D
glViewport
glDepthRange
glClearDepth

Exports

Exports

z_adler32
z_adler32_combine
z_adler32_combine64
z_compress
z_compress2
z_compressBound
z_crc32
z_crc32_combine
z_crc32_combine64
z_deflate
z_deflateBound
z_deflateCopy
z_deflateEnd
z_deflateInit2_
z_deflateInit_
z_deflateParams
z_deflatePrime
z_deflateReset
z_deflateSetDictionary
z_deflateSetHeader
z_deflateTune
z_get_crc_table
z_inflate
z_inflateCopy
z_inflateEnd
z_inflateGetHeader
z_inflateInit2_
z_inflateInit_
z_inflateMark
z_inflatePrime
z_inflateReset
z_inflateReset2
z_inflateSetDictionary
z_inflateSync
z_inflateSyncPoint
z_inflateUndermine
z_uncompress
z_zError
z_zlibCompileFlags
z_zlibVersion

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8213bea48394124db58f5fb968bb1181

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

imm32

winmm

gdi32

kernel32

user32

shell32

ole32

advapi32

ws2_32

opengl32

Exports

Exports

Sections

.text Size: 4.4MB - Virtual size: 4.4MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 65KB - Virtual size: 131KB

.qtmetad Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 708B

.reloc Size: 187KB - Virtual size: 186KB

.text
Size: 4.4MB - Virtual size: 4.4MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 65KB - Virtual size: 131KB

.qtmetad
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 708B

.reloc
Size: 187KB - Virtual size: 186KB